$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft File: 627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft (raw, json) Hash identifier: UmU8exnHXsT58E4E9xpmyLq2qk29gLIuuM9jRZwpK5A= Subject key identifier: 5D:A8:0B:10:3A:1A:FF:BC:8C:9B:D3:F4:F4:F0:C4:F1:3F:69:30:9B Authority key identifier: 62:7B:38:76:04:DE:44:D6:00:6F:0E:75:67:E2:D0:7E:E8:2C:F6:BD Certificate issuer: /CN=627B387604DE44D6006F0E7567E2D07EE82CF6BD Certificate serial: 3751376EC2CCA91FB253366DA519177D55F95984 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft Manifest number: 0105 Signing time: Tue 25 Aug 2026 12:36:56 +0000 Manifest this update: Tue 25 Aug 2026 12:31:56 +0000 Manifest next update: Wed 26 Aug 2026 16:15:56 +0000 Files and hashes: 1: 326130613a363034343a376436303a3a2f34342d3434203d3e20323134353130.roa (hash: y/xuVv7X6zYCJrPA+bDxsoe/LQIZz7CWdfVo8c7UFKw=) 2: 326130613a363034343a376430303a3a2f34342d3434203d3e20323134353130.roa (hash: ae529QqeuntcTFvv9T15+WP4/UdZC9RUyhsU7rktznM=) 3: 627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl (hash: RDOH6G4lwICs6eDIthw97ll42x3e4eJJe1Tc5RXQW8A=) 4: 326130613a363034343a376432303a3a2f34382d3438203d3e20323134353130.roa (hash: c4XzPukkzKV+FHVuebz0bc6eIqhJ7TnmT9Q2167h39Y=) 5: 326130613a363034343a376432323a3a2f34382d3438203d3e20323134353130.roa (hash: 2VvQmqh0rgVlWv8W6Pzf59GFxuPhxLO/UhXjGSwmG7I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Aug 2026 16:15:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:51:37:6e:c2:cc:a9:1f:b2:53:36:6d:a5:19:17:7d:55:f9:59:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=627B387604DE44D6006F0E7567E2D07EE82CF6BD Validity Not Before: Aug 25 12:31:56 2026 GMT Not After : Aug 26 16:15:56 2026 GMT Subject: CN=5DA80B103A1AFFBC8C9BD3F4F4F0C4F13F69309B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3f:1d:e5:d3:59:57:e3:33:d2:c3:b3:02:77: d8:41:ea:0c:f7:3f:56:e2:d8:d6:0e:d0:9d:bb:5c: dd:95:2b:2e:68:4c:99:50:57:78:f2:d9:b6:10:e8: be:9a:bd:79:1e:9e:e2:a2:40:b1:41:fd:2e:e0:19: e2:a3:70:a1:d7:e7:59:24:4a:8c:1a:69:af:84:e2: 03:cb:7a:41:43:58:36:19:3a:bc:00:0f:c3:97:4e: 74:b8:fb:ad:ec:f1:1e:65:1a:7e:60:ea:03:7c:0b: 9b:41:00:6d:e9:7b:47:6b:5c:26:2b:5b:33:05:79: 01:17:3b:09:06:4e:d8:dc:a6:b6:e6:95:7d:47:5d: b4:02:dc:c7:a0:bf:e1:5e:e9:7d:e7:bd:49:98:f3: 88:f3:a5:55:1a:4d:2e:f5:0c:76:96:53:4c:0e:43: 7e:ef:95:fe:d1:c1:5e:ef:47:48:de:56:33:fa:64: 98:a1:7b:40:bf:7c:3a:67:dd:5e:aa:79:3e:4b:2c: 8a:79:3d:fe:26:fb:7d:48:d6:be:c7:70:5e:fd:f8: 63:5d:a1:19:ec:a1:c3:30:05:2c:17:32:09:37:90: 38:72:be:f5:b4:45:26:2d:2e:29:7b:fc:a6:94:5d: ca:92:fb:50:de:11:e7:1b:2e:3d:63:f7:4c:c7:64: e9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A8:0B:10:3A:1A:FF:BC:8C:9B:D3:F4:F4:F0:C4:F1:3F:69:30:9B X509v3 Authority Key Identifier: keyid:62:7B:38:76:04:DE:44:D6:00:6F:0E:75:67:E2:D0:7E:E8:2C:F6:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:3f:44:1b:62:c0:3d:18:f6:de:35:11:80:89:48:35:7a:38: 8e:44:db:02:9f:9c:84:3e:ea:f7:fe:42:73:91:78:4f:54:10: 29:77:e2:84:10:78:3c:1d:a1:f8:44:4d:4f:d2:06:03:20:e8: c4:41:a5:e1:13:63:7a:c9:cc:c3:ad:b5:da:1e:43:4d:40:48: 05:ce:13:9d:52:2f:c9:c3:b1:48:8b:9a:67:94:13:d6:53:94: 3f:b6:ed:87:06:73:86:c7:ef:59:a2:d2:1d:9c:3a:0a:ee:8f: c8:88:d7:e3:53:bf:9c:12:a8:11:7a:e6:6c:a5:ba:4b:67:04: ac:08:eb:d2:cc:4d:64:e5:ca:56:14:0f:1a:8a:03:9a:c8:d1: a6:96:43:a1:28:87:16:e1:a7:dc:e9:d4:7a:28:84:fb:c2:dc: 44:79:70:57:b7:01:77:41:80:90:b7:b3:c6:0e:b1:95:43:b7: 31:bc:22:77:b1:de:3e:23:e5:7b:a7:da:41:b8:a9:18:f0:7a: 67:c1:91:40:7b:8e:9a:e9:aa:f3:f9:b9:b6:dc:72:9e:8c:ce: 7c:47:bf:30:9c:ef:b9:bf:c6:95:f4:8c:6b:4f:eb:96:20:7d: 74:3b:af:2c:31:ca:82:24:ac:2a:35:2c:48:0d:7d:63:a9:cb: 2c:96:b4:ab -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUN1E3bsLMqR+yUzZtpRkXfVX5WYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI3QjM4NzYwNERFNDRENjAwNkYwRTc1NjdFMkQwN0VF ODJDRjZCRDAeFw0yNjA4MjUxMjMxNTZaFw0yNjA4MjYxNjE1NTZaMDMxMTAvBgNV BAMTKDVEQTgwQjEwM0ExQUZGQkM4QzlCRDNGNEY0RjBDNEYxM0Y2OTMwOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRPx3l01lX4zPSw7MCd9hB6gz3 P1bi2NYO0J27XN2VKy5oTJlQV3jy2bYQ6L6avXkenuKiQLFB/S7gGeKjcKHX51kk Sowaaa+E4gPLekFDWDYZOrwAD8OXTnS4+63s8R5lGn5g6gN8C5tBAG3pe0drXCYr WzMFeQEXOwkGTtjcprbmlX1HXbQC3Megv+Fe6X3nvUmY84jzpVUaTS71DHaWU0wO Q37vlf7RwV7vR0jeVjP6ZJihe0C/fDpn3V6qeT5LLIp5Pf4m+31I1r7HcF79+GNd oRnsocMwBSwXMgk3kDhyvvW0RSYtLil7/KaUXcqS+1DeEecbLj1j90zHZOnPAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUXagLEDoa/7yMm9P09PDE8T9pMJswHwYDVR0j BBgwFoAUYns4dgTeRNYAbw51Z+LQfugs9r0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNGJmYTdhOWYtMjhkMy00NWIwLWE4MzktYTU3NTE5ZWNh ZWFlLzIvNjI3QjM4NzYwNERFNDRENjAwNkYwRTc1NjdFMkQwN0VFODJDRjZCRC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS82MjdCMzg3NjA0REU0NEQ2MDA2RjBFNzU2 N0UyRDA3RUU4MkNGNkJELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzRiZmE3YTlmLTI4ZDMtNDViMC1hODM5LWE1NzUxOWVjYWVhZS8yLzYyN0IzODc2 MDRERTQ0RDYwMDZGMEU3NTY3RTJEMDdFRTgyQ0Y2QkQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDFP0Qb YsA9GPbeNRGAiUg1ejiORNsCn5yEPur3/kJzkXhPVBApd+KEEHg8HaH4RE1P0gYD IOjEQaXhE2N6yczDrbXaHkNNQEgFzhOdUi/Jw7FIi5pnlBPWU5Q/tu2HBnOGx+9Z otIdnDoK7o/IiNfjU7+cEqgReuZspbpLZwSsCOvSzE1k5cpWFA8aigOayNGmlkOh KIcW4afc6dR6KIT7wtxEeXBXtwF3QYCQt7PGDrGVQ7cxvCJ3sd4+I+V7p9pBuKkY 8HpnwZFAe46a6arz+bm23HKejM58R78wnO+5v8aV9IxrT+uWIH10O68sMcqCJKwq NSxIDX1jqcsslrSr -----END CERTIFICATE-----Generated at Wed Aug 26 08:07:44 2026 by rpki-client